Technical SEO · Beginner

HTTPS

HTTPS is the secure version of HTTP: traffic between the browser and the site is encrypted with a TLS certificate. Browsers mark plain-HTTP pages as "Not secure", and Google uses HTTPS as a lightweight ranking signal.

By Thryv StudioUpdated

Level
Beginner
Requires
A valid TLS certificate
Signal
Ranking signal since 2014
Extra
HSTS header tells browsers to always use HTTPS
Check it free
Redirect Checker

What is HTTPS?

HTTPS encrypts everything sent between the visitor and your site, so it can't be read or altered in transit. It needs a TLS certificate, which most hosts provide free.

Why it matters

  • Browsers warn visitors on plain HTTP pages, especially those with forms.
  • Google has used HTTPS as a ranking signal since 2014.
  • Modern browser features require it.

Best practices

  1. Serve every page over HTTPS and 301-redirect HTTP to it.
  2. Make internal links, canonicals and sitemaps use https:// URLs.
  3. Renew certificates automatically and cover both www and non-www.
  4. Add an HSTS header once everything works over HTTPS.

Frequently asked questions

What is mixed content?

An HTTPS page loading images or scripts over HTTP. Browsers block or warn about it, so update those URLs to HTTPS.

Browse the glossary

Chat on WhatsApp